Security Engineer, Detection & Response

Home > Python programming jobs

Security Engineer, Detection & Response in USA

Thinking Machines Lab
Full time
Email

USA
10/27/2026
Report

San Francisco, CA

Responsibilities

Lead end-to-end security incident response, including triage, investigation, containment, eradication, recovery, and postmortems.
Design, build, and operate security data pipelines and tooling for telemetry from cloud, Kubernetes, identity, endpoint, SaaS, and application sources.
Author, deploy, and maintain high-fidelity detections across SIEM, endpoint, cloud, and security tooling.
Build and run a threat intelligence practice focused on adversaries and campaigns targeting AI labs.
Conduct threat hunting and build automation, playbooks, enrichment, and automated containment tooling.
Collaborate with research and product teams to detect AI-specific threats in production.
Develop and exercise incident response plans, on-call processes, and tabletop exercises.
Participate in an on-call pager rotation for security incidents.

Requirements

Bachelor’s degree or equivalent experience in computer science, engineering, or a similar field.
Proficiency in Python or Rust for data pipelines, detections, and internal tools.
Demonstrated experience responding to real production security incidents and leading investigations across teams.
Hands-on experience building and operating security data pipelines at scale, including ingestion, parsing, normalization, enrichment, storage, and querying.
Experience producing and consuming threat intelligence, tracking adversary TTPs, using MITRE ATT&CK, and translating intelligence into detections and hunts.
Strong understanding of cloud environments including AWS, GCP, or Azure, as well as Kubernetes and identity-provider telemetry.
Familiarity with host and network forensics, endpoint telemetry, memory and disk analysis, and network logs.
Ability to operate across the stack and own projects end-to-end.
Clear communication skills for incident reports, intelligence briefs, and postmortems.
Preferred: detection and response experience at an AI lab, cloud provider, or other high-threat environment.
Preferred: experience detecting AI-specific abuse such as prompt injection, model extraction, or anomalous API usage.
Preferred: familiarity with ML infrastructure telemetry, including GPU clusters, training jobs, and model artifact storage.
Preferred: experience with stream processing and cost-aware log management at high volume.
Preferred: malware analysis or reverse engineering experience, and talks, blogs, open-source detection content, or published threat research.

Benefits

Annual salary range of $300,000–$350,000 USD.
Generous health, dental, and vision benefits.
Unlimited PTO.
Paid parental leave.
Relocation support as needed.
Based in San Francisco, California.
Visa sponsorship is available, subject to the employer’s stated success caveat.

Salary: $300k - $350k/yr

Thinking Machines Lab

Thinking Machines Lab pioneers advanced AI research, blending cutting‑edge theory with practical applications to solve complex problems across industries. Our interdisciplinary team pushes the boundaries of machine learning, neural architecture, and cognitive modeling to deliver innovative soluti...

Similar positions

Senior Threat Detection Engineer

Blackbaud
Full time

USA
10/30/2026
Salary: $102k-$133k

Remote

Platform Engineer, Biotech

Clera
Full time

USA
10/30/2026
Salary: $180k - $240k/yr

San Francisco, CA

Senior Staff Security Engineer

ServiceNow
Full time

USA
10/30/2026

Remote

Staff Software Engineer, Backend (Recoveries)

Affirm
Full time

Remote
10/30/2026
Salary: PLN 365,000 - 485,000

Poland

Senior Engineer, Data & Perception

Senra Systems
Full time

USA
10/29/2026
Salary: $180k - $230k/yr

Cypress, CA